Hi all, I am trying to figure out what CoA can do and how to configure it. I read the documents in official site, and try to google any resources which can help me. Bad luck. ** Environemnt ** 1. I have installed FreeRADIUS 2.1.12 on Ubuntu 14.04, IP: 192.168.10.6 2. A NAS(L2 switch), IP: 192.168.10.7 3. A PC without Wireshark, IP: 192.168.10.8 4. All of them connected by a hub ** Status ** 1. I add client 192.168.10.0/24 { secret = 123456 } in clients.conf, and add yoyo Cleartext-Password := 111111 cisco-avpair = "shell:priv-lvl=10" in the users After complete the configuration in NAS, the NAS can get Access-Accept with AVP correctly. 2. I am stuck on how to move forward on CoA ** Questions need help ** Q1. Is there any article or book can help me to configure about CoA? Q2. Will FreeRADIUS send CoA-Request out when someone modify the priv-lvl in users? Or what is a good way for me to test and understand the behavior of CoA? Thanks for any help and suggestions! Sincerely, 陳明正 Yoyo Chen https://yoyochen.blogspot.tw
hi,
** Questions need help ** Q1. Is there any article or book can help me to configure about CoA?
there are several posts out there of people who have done things with their kit - it really is very unique to each NAS/requirement
Q2. Will FreeRADIUS send CoA-Request out when someone modify the priv-lvl in users? Or what is a good way for me to test and understand the behavior of CoA?
no. changes to users are not tracked in that way - if you restart freeradius to pull in the new values it wont know that something needs to be sent to the NAS. you need a lot of logic and backend stuff to do CoA - ideally this would be some kind of DB with action scripts if values should be changed....with ability to pull out the session ID etc etc. radclient is a good way to test behaviour alan
participants (2)
-
Alan Buxey -
Yoyo Chen